Re: how can cheap routers do it?

2004-07-12 Thread Sean
get -current. NAT-T is working for me. Make sure you enable net.inet.esp.udpencap. Sean James Cammarata wrote: At 01:25 PM 7/11/2004, you wrote: On Wed, Jul 07, 2004 at 08:42:58AM +0200, the unit calling itself Jean-Francois Dive wrote: How about the ability to handle IPSec

Re: how can cheap routers do it?

2004-07-12 Thread Laurent Cheylus
Hi, On Sun, Jul 11, 2004 at 01:25:31PM -0500, J Moore wrote: it's the nature of the protocol. Use nat-t and you should not have any problem... I've looked through the pf user's guide, and can't find anything on nat-t... How is nat-t accomplished in OBSD's pf? NAT-T is a feature to

Re: how can cheap routers do it?

2004-07-11 Thread J Moore
On Wed, Jul 07, 2004 at 08:42:58AM +0200, the unit calling itself Jean-Francois Dive wrote: How about the ability to handle IPSec passthrough??? I think both IPSec/PPTP passthrough abilities would be a big + for PF for people that are looking for this feature but stuck using a Linksys

Re: how can cheap routers do it?

2004-07-11 Thread James Cammarata
At 01:25 PM 7/11/2004, you wrote: On Wed, Jul 07, 2004 at 08:42:58AM +0200, the unit calling itself Jean-Francois Dive wrote: How about the ability to handle IPSec passthrough??? I think both IPSec/PPTP passthrough abilities would be a big + for PF for people that are looking for this

Re: how can cheap routers do it?

2004-07-07 Thread cell-X
How about the ability to handle IPSec passthrough??? I think both IPSec/PPTP passthrough abilities would be a big + for PF for people that are looking for this feature but stuck using a Linksys router to do it... I don't want to put any maps.. i just want it to work. uf

Re: how can cheap routers do it?

2004-07-07 Thread Jean-Francois Dive
it's the nature of the protocol. Use nat-t and you should not have any problem... On Tue, Jul 06, 2004 at 04:04:59PM -0700, cell-X wrote: How about the ability to handle IPSec passthrough??? I think both IPSec/PPTP passthrough abilities would be a big + for PF for people that are looking for

Re: how can cheap routers do it?

2004-06-14 Thread Damien Miller
cell-X wrote: Good day, I haven't seen this question thrown in here or the openbsd list but how can you make a openbsd PF firebox allow PPTP passthrough and IPSEC passthrough like Linksys and SMC routers? I know that you can do PPTP one-to-one map but the connections are going to be going

how can cheap routers do it?

2004-06-12 Thread cell-X
Good day, I haven't seen this question thrown in here or the openbsd list but how can you make a openbsd PF firebox allow PPTP passthrough and IPSEC passthrough like Linksys and SMC routers? I know that you can do PPTP one-to-one map but the connections are going to be going to different